7 matches found
CVE-2025-55817
Vulnerability Type Cross Site Scripting XSS Affected Component The Connection Settings of the Nitro GraphQL by Chillicream, contain 3 different input locations vulnerable to Cross Site Scripting XSS. Vulnerable Parameters : SDL Schema Endpoint, Subscription Endpoint, SSE Subscription Endpoint...
EUVD-2025-199120
Malicious code in nitro-graphql npm...
Malicious code in nitro-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef7661deeec20f2ea8ef1c642811be2a627ee5e8b6a3f51cd61de1e421547b The package nitro-graphql was found to contain malicious code. Source: ghsa-malware a77bf7f130d454574e5e838c6ce7922e015408f32542a4b15e77d26698129fe3...
abckit (>=0.0.1, <=0.0.37) potentially affected by unknown CVE via nitro-graphql (1.8.0)
nitro-graphql NPM version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on nitro-graphql and may be impacted: - abckit =0.0.1, =0.0.37 Source cves: unknown CVE Source advisory: GHSA-8Q6Q-44GW-JHXC...
MAL-2025-191131 Malicious code in nitro-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef7661deeec20f2ea8ef1c642811be2a627ee5e8b6a3f51cd61de1e421547b The package nitro-graphql was found to contain malicious code. Source: ghsa-malware a77bf7f130d454574e5e838c6ce7922e015408f32542a4b15e77d26698129fe3...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
